Third Party Index

Snapshot 11924

Document
Security page
URL
https://www.chatwoot.com/security
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
276390 bytes
SHA-256 (raw)
71f07f63aa55456a33dd99120e87553a193d869f796188b4d457a524431bb6ae
SHA-256 (normalized text)
d08b805b5ae9d972a62031ce157de860447f6e2574d1d497369d29bfe8017a88

Normalized text

Scripts and page chrome removed; this is what change detection compares.

SOC 2 Type IIGDPR Compliant
Security at Chatwoot
Your data security is our top priority. We follow industry best practices and maintain rigorous compliance standards to keep your information safe.
Report a security concern
SOC 2 Type II Certified
We've met rigorous standards for information security, including strict policies and procedures to ensure the security, availability, processing integrity, and confidentiality of user data.
View trust portal
GDPR Compliant
We align with GDPR requirements across our product, processes, and agreements so your teams can confidently support customers in the EU and beyond. Our privacy posture covers data processing terms, access controls, and clear workflows for data subject requests.
View trust portal
How we protect your data
Multiple layers of security to ensure your customer data stays safe.
Data Encryption
All data is encrypted at rest and in transit using AES-256 encryption. We use AWS KMS with hardware security modules for key management.
Application Security
We use CodeQL, Secrets Scanner, and Dependabot for continuous security analysis. Our open-source codebase is regularly audited by security experts.
Infrastructure Security
Hosted on AWS with GuardDuty, Inspector, and WAF protection. Multi-region redundancy ensures high availability and disaster recovery.
Access Control
Role-based access control, SSO/SAML support, and audit logs for all administrative actions. Two-factor authentication available for all accounts.
Data Privacy
GDPR compliant with data processing agreements available. We follow strict data protection regulations to safeguard your information.
Learn more
Incident Response
24/7 monitoring with automated alerts. Dedicated incident response team with documented procedures for rapid resolution.
Self-Hosted Option
Full control with self-hosting
For organizations with strict data residency requirements, self-host Chatwoot on your own infrastructure. Keep all customer data within your environment and maintain complete control over your security policies.
Complete data sovereignty and residency control
Deploy in your own cloud or on-premises
Integrate with your existing security infrastructure
Meet industry-specific compliance requirements
Learn about self-hosting
200K+
Self-hosted instances
100%
Data ownership
MIT
Open source license
24/7
Community support
Have security questions?
Our security team is here to help. Reach out for security assessments, compliance documentation, or to report vulnerabilities.
Contact security team